Collecting Cyber-News from over 60 sources

Tag: data-breach

Hacker Claims WooCommerce Data Breach, Selling 4m User Records

Apr 10, 2025 12:06 AM

Tags: breach, data, data-breach, hacker

A hacker using the alias “Satanic” claims a WooCommerce data breach via a third party, selling data on… First seen on hackread.com Jump to article: hackread.com/hacker-claims-woocommerce-data-breach-selling-records/
Oracle says “obsolete servers” hacked, denies cloud breach

Apr 9, 2025 10:06 PM

Tags: breach, cloud, credentials, data-breach, email, hacker, oracle

Oracle finally confirmed in email notifications sent to customers that a hacker stole and leaked credentials that were stolen from what it described as “two obsolete servers.” First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/oracle-says-obsolete-servers-hacked-denies-cloud-breach/
Cybercriminals Attacked National Social Security Fund of Morocco – Millions of Digital Identities at Risk of Data Breach

Apr 9, 2025 8:55 PM

Tags: breach, cybercrime, data, data-breach, risk

First seen on resecurity.com Jump to article: www.resecurity.com/blog/article/cybercriminals-attacked-national-social-security-fund-of-morocco-millions-of-digital-identities-at-risk-of-data-breach
National Social Security Fund of Morocco Suffers Data Breach

Apr 9, 2025 8:55 PM

Tags: breach, data, data-breach, government, threat

Threat actor ‘Jabaroot’ claims breach of National Social Security Fund of Morocco, aiming to steal large volumes of sensitive citizen data. Resecurity has identified a threat actor targeting government systems in Morocco with the goal of exfiltrating large volumes of sensitive data relating to citizens. The actor using the alias ‘Jabaroot’ released claims about the…
Verbraucher sollten aktiv werden: Nach Datenleck bei Samsung Anspruch auf Schadensersatz prüfen

Apr 9, 2025 5:55 PM

Tags: data-breach

First seen on datensicherheit.de Jump to article: www.datensicherheit.de/verbraucher-datenleck-samsung-pruefung-anspruch-schadensersatz
Hackers Claim Magento Breach via Third-Party, Leak CRM Data of 700K Users

Apr 9, 2025 5:55 PM

Tags: breach, data, data-breach, hacker, leak

Another day, another data breach claim involving a high-profile company! First seen on hackread.com Jump to article: hackread.com/hackers-magento-breach-3rd-party-crm-data-leak/
Samsung-Datenleck: Was Betroffene jetzt tun können

Apr 9, 2025 5:55 PM

Tags: access, dark-web, data-breach, germany

Samsung Deutschland wurde Ziel eines groß angelegten Hackerangriffs. Unbekannte verschafften sich Zugriff auf interne Supportsysteme und entwendeten rund 270.000 sensible Kundendatensätze, die nun im Darknet angeboten werden. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/samsung-datenleck-was-betroffene-jetzt-tun-koennen
WK Kellogg confirms employee data breach tied to Cleo file-transfer flaw

Apr 8, 2025 6:42 PM

Tags: breach, data, data-breach, flaw

The Michigan-based breakfast cereal company confirmed it used Cleo as a vendor for human resources data. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/wk-kellogg-employee-data-breach-cleo/744739/
Arguing Against CALEA

Apr 8, 2025 3:42 PM

Tags: breach, computer, cybersecurity, data, data-breach, infrastructure, jobs, law, phone, threat, unauthorized

At a Congressional hearing earlier this week, Matt Blaze made the point that CALEA, the 1994 law that forces telecoms to make phone calls wiretappable, is outdated in today’s threat environment and should be rethought: In other words, while the legally-mandated CALEA capability requirements have changed little over the last three decades, the infrastructure that…
Over 5,000 Ivanti Connect Secure Devices Exposed to RCE Vulnerabilities

Apr 8, 2025 3:42 PM

Tags: cyber, data, data-breach, exploit, flaw, ivanti, rce, remote-code-execution, vulnerability

Over 5,000 Ivanti Connect Secure devices remain vulnerable to a critical remote code execution (RCE) flaw, according to data from the Shadowserver Foundation. The vulnerability, tracked as CVE-2025-22457, stems from a stack-based buffer overflow issue, enabling unauthenticated attackers to execute arbitrary code remotely. The flaw has already been exploited in the wild, raising alarms across the…
Google to Patch 23-Year-Old Chrome Bug That Leaked Browsing History

Apr 8, 2025 2:42 PM

Tags: browser, chrome, cyber, data-breach, google, update, vulnerability

Google has announced a groundbreaking update to its Chrome browser that addresses a vulnerability in the web browser’s code, which has been leaking users’ browsing history for over two decades. This long-standing issue stems from the CSS:visitedselector”, a web design feature that allows websites to stylize previously visited links. While originally designed to improve user…
Threat Actor Leaks Data from Major Bulletproof Hosting Provider Medialand

Apr 8, 2025 11:42 AM

Tags: breach, control, cyber, cybercrime, data, data-breach, infrastructure, leak, malware, phishing, ransomware, threat

A threat actor disclosed internal data from Medialand, a prominent bulletproof hosting (BPH) provider long associated with Yalishanda, a cybercriminal organization tracked as LARVA-34. The breach has exposed the backend systems and operational infrastructure of Medialand, which has historically facilitated a wide array of illicit cyber activities, including ransomware operations, malware control-and-command systems, phishing campaigns,…
Kellogg’s Servers Breached, Hackers Steal Sensitive Data

Apr 8, 2025 10:42 AM

Tags: breach, cyber, data, data-breach, hacker

WK Kellogg Co., one of the world’s leading cereal and snack manufacturers, has fallen victim to a significant data breach, exposing the sensitive information of an undisclosed number of individuals. The breach, which occurred on December 7, 2024, was only discovered nearly three months later on February 27, 2025, according to a notification submitted by…
Why DEI is key for a cyber safe future

Apr 8, 2025 9:42 AM

Tags: access, ai, country, cyber, cyberattack, cybersecurity, data-breach, infrastructure, mitigation, regulation, risk, skills, technology, threat

grow a workforce and body of expertise, not shrink it.By illuminating career pathways or creating opportunities for those who have been historically overlooked, DEIB programs welcome people that may not have been exposed or traditionally have lacked access to the space. Across the US, Black practitioners make up only 8% of the total tech workforce.…
10 things you should include in your AI policy

Apr 8, 2025 8:42 AM

Tags: access, ai, best-practice, breach, business, ceo, ciso, compliance, cybersecurity, data, data-breach, finance, framework, gartner, GDPR, governance, incident response, insurance, law, monitoring, privacy, regulation, risk, software, strategy, switch, technology, tool, training, update

Input from all stakeholders: At Aflac, the security team took the initial lead on developing the company’s AI policy. But AI is not just a security concern. “And it’s not just a legal concern,” Ladner says. “It’s not just a privacy concern. It’s not just a compliance concern. You need to bring all the stakeholders…
Auto-Color Linux Backdoor: TTPs and Internal Architecture Exposed

Apr 7, 2025 10:42 PM

Tags: backdoor, cyber, data-breach, government, linux, malware, tactics, tool, usa

A newly identified Linux backdoor named >>Auto-Color,
23andMe Data Breach: A Wake-Up Call for Consumer Privacy and Corporate Accountability

Apr 7, 2025 9:42 PM

Tags: breach, corporate, data, data-breach, privacy

In recent months, the fallout from the 23andMe data breach has offered a sobering reminder of the real-world implications of poor data security”, and the profound responsibility companies bear when entrusted with sensitive consumer information. In October 2023, 23andMe, one of the most well-known consumer genetic testing companies, disclosed a significant breach that affected nearly…
Food giant WK Kellogg discloses data breach linked to Clop ransomware

Apr 7, 2025 6:42 PM

Tags: breach, data, data-breach, ransomware, theft

US food giant WK Kellogg Co is warning employees and vendors that company data was stolen during the 2024 Cleo data theft attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/food-giant-wk-kellogg-discloses-data-breach-linked-to-clop-ransomware/
âš¡ Weekly Recap: VPN Exploits, Oracle’s Silent Breach, ClickFix Surge and More

Apr 7, 2025 4:42 PM

Tags: breach, cloud, credentials, data-breach, exploit, Hardware, jobs, malware, oracle, password, service, social-engineering, supply-chain, vpn

Today, every unpatched system, leaked password, and overlooked plugin is a doorway for attackers. Supply chains stretch deep into the code we trust, and malware hides not just in shady apps, but in job offers, hardware, and cloud services we rely on every day.Hackers don’t need sophisticated exploits anymore. Sometimes, your credentials and a little…
The Fastest Way to Secure Your APIs? We’ve Got That Covered with CrowdStrike

Apr 7, 2025 3:42 PM

Tags: api, attack, cloud, crowdstrike, data, data-breach, endpoint, firewall, governance, identity, intelligence, risk, security-incident, siem, threat, tool, vulnerability

APIs are the backbone of modern apps, but they also introduce some serious security risks. Attackers are constantly on the lookout for vulnerable APIs, shadow APIs, zombie APIs, and exposed sensitive data”, all of which are tough to track if you don’t have the right tools in place. That’s why we’ve teamed up with CrowdStrike…
âš¡ Weekly Recap: VPN Exploits, Oracle’s Silent Breach, ClickFix Comeback and More

Apr 7, 2025 3:42 PM

Tags: breach, cloud, credentials, data-breach, exploit, Hardware, jobs, malware, oracle, password, service, social-engineering, supply-chain, vpn

Today, every unpatched system, leaked password, and overlooked plugin is a doorway for attackers. Supply chains stretch deep into the code we trust, and malware hides not just in shady apps, but in job offers, hardware, and cloud services we rely on every day.Hackers don’t need sophisticated exploits anymore. Sometimes, your credentials and a little…
Security Theater: Vanity Metrics Keep You Busy – and Exposed

Apr 7, 2025 1:42 PM

Tags: compliance, cybersecurity, data-breach, metric, risk, vulnerability

After more than 25 years of mitigating risks, ensuring compliance, and building robust security programs for Fortune 500 companies, I’ve learned that looking busy isn’t the same as being secure. It’s an easy trap for busy cybersecurity leaders to fall into. We rely on metrics that tell a story of the tremendous efforts we’re expending…
DeepSeek Breach Yet Again Sheds Light on Dangers of AI

Apr 7, 2025 12:42 PM

Tags: ai, breach, data-breach, encryption, vulnerability

AI isn’t waiting for security teams to catch up. It’s running full steam ahead, without any regard for what may stand in its way. The recent security debacle surrounding DeepSeek, where Wiz researchers uncovered extensive vulnerabilities, including exposed databases, weak encryption and susceptibility to AI-model jailbreaking, serves as a stark warning for organizations.. First seen…
Datenleck: Kundendaten und Quellcode von Europcar abgeflossen

Apr 7, 2025 9:42 AM

Tags: data-breach, gitlab, hacker

Ein Hacker hat wohl erfolgreich Gitlab-Repos von Europcar kompromittiert und dadurch Kundendaten und andere vertrauliche Informationen erbeutet. First seen on golem.de Jump to article: www.golem.de/news/datenleck-kundendaten-und-quellcode-von-europcar-abgeflossen-2504-195077.html
Oracle privately notifies Cloud data breach to customers

Apr 6, 2025 11:42 PM

Tags: breach, cloud, data, data-breach, oracle, threat

Oracle confirms a cloud data breach, quietly informing customers while downplaying the impact of the security breach. Oracle confirms a data breach and started informing customers while downplaying the impact of the incident. A threat actor using the moniker ‘rose87168’ claimed to possess millions of data lines tied to over 140,000 Oracle Cloud tenants, including…
Hacker Claims Twilio’s SendGrid Data Breach, Selling 848,000 Records (UPDATED)

Apr 6, 2025 4:42 PM

Tags: breach, data, data-breach, hacker

This article has been updated with a statement from a Twilio spokesperson in response to Hackread.com’s request. A statement from the hacker has also been added claiming that the data is authentic. First seen on hackread.com Jump to article: hackread.com/hacker-twilio-sendgrid-data-breach-customer-data/
Security Affairs newsletter Round 518 by Pierluigi Paganini INTERNATIONAL EDITION

Apr 6, 2025 2:42 PM

Tags: data-breach, email, flaw, international, WeeklyReview

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. A flaw in Verizon’s iOS Call Filter app exposed call records of millions Port of Seattle ‘s August…
Datenleck bei LensDeal 100.000 Nutzerdaten abgeflossen

Apr 6, 2025 11:42 AM

Tags: cyberattack, data-breach

Beim niederländischen Unternehmen LensDeal hat es mutmaßlich einen Datenschutzvorfall gegeben. Dabei sind 100.000 persönliche Daten, mutmaßlich bei einem Cyberangriff auf deren IT-Systeme, von Kunden abgeflossen. Die bisher nicht verifizierten Datensätze, die in einem Untergrundforum angeboten werden, stammen aus den vergangenen … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/04/05/datenleck-bei-lensdeal-100-000-nutzerdaten-abgeflossen/
Exposed SpotBugs token caused GitHub supply chain intrusion, report finds

Apr 5, 2025 11:42 PM

Tags: data-breach, github, supply-chain

First seen on scworld.com Jump to article: www.scworld.com/brief/exposed-spotbugs-token-caused-github-supply-chain-intrusion-report-finds
Massive trove of underage deepfakes leaked by misconfigured GenNomis database

Apr 5, 2025 11:42 PM

Tags: data-breach, deep-fake

First seen on scworld.com Jump to article: www.scworld.com/brief/massive-trove-of-underage-deepfakes-leaked-by-misconfigured-gennomis-database